PT-2026-144102

CVE-2026-67374

Published

2026-11-10

Updated

2026-11-10

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions prior to 14.0.2150.2

Description A heap-based buffer overflow exists in Microsoft SQL Server, which allows an authorized attacker to execute arbitrary code over a network. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially corrupting memory and allowing for code execution.

Recommendations Update to version 14.0.2150.2.

Exploitability

Fix

Impacts

Researchers

7770Ccbbf129444Eb66344Ccafb92B00Df